k555 Privacy Policy — How We Protect Your Data

k555 is an online entertainment and gaming platform operating at k555.io, offering sports betting, live casino, slot games, and related services to players across Bangladesh. The protection of your personal data is a matter k555 treats with the highest seriousness.

This Policy applies to:

• All registered account holders on the k555 platform.
• Visitors who browse k555.io without registering an account.
• Any individual who contacts k555 via email, live chat, or any other support channel.

This Policy does not apply to third-party websites, payment platforms, or game studio portals that may be linked to or integrated within the k555 platform. k555 is not responsible for the privacy practices of those third parties and encourages you to review their own privacy policies independently.

k555 collects personal data across several categories depending on your interaction with the platform. The following table summarises the main data types collected:

k555 does not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by law or explicitly provided by you in the context of a responsible gaming referral.

k555 collects personal data through the following channels:

• Direct submission: Information you actively provide during account registration, KYC document uploads, support enquiries, or responsible gaming tool configuration.
• Automated technical collection: Data collected automatically when you access the k555 platform, including your IP address, browser fingerprint, device identifiers, and session activity logs. This data is gathered using server logs, cookies, and similar tracking technologies (see Section 6 — Cookies & Tracking).
• Payment providers: When you deposit or withdraw via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, k555 receives transaction confirmation data from the relevant payment provider. This typically includes a transaction reference, amount, and timestamp — k555 does not receive your full card number or mobile banking PIN.
• Game studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Red Tiger, and Ezugi may pass game session result data to k555 for account settlement and dispute resolution purposes.
• Identity verification partners: Where k555 uses a third-party KYC service to verify government-issued identification documents, that service transmits a verification result (pass/fail and supporting data) back to k555.
• Fraud detection systems: k555 uses automated fraud detection tools that analyse betting patterns, IP reputation data, and device consistency to identify suspicious activity.

k555 processes personal data only where there is a clear, lawful purpose for doing so. The primary purposes and corresponding legal bases are as follows:

• Account registration and service delivery: Processing is necessary to perform the contract between you and k555 — specifically, to create and maintain your account, accept deposits, settle bets, and process withdrawals.
• Identity verification (KYC): Processing is necessary to comply with anti-fraud and responsible gaming obligations, and to verify that you meet the 21+ age requirement.
• Transaction processing: Processing is necessary to perform the contract and to comply with financial record-keeping obligations.
• Fraud prevention and security: Processing is carried out in k555's legitimate interests to detect, prevent, and investigate fraudulent activity, money laundering, multi-accounting, and bonus abuse.
• Responsible gaming compliance: Processing is necessary to fulfil k555's responsible gaming obligations, including monitoring for problem gambling indicators and enforcing self-exclusion requests.
• Customer support: Processing is necessary to respond to your support enquiries and to resolve disputes relating to your account or game results.
• Marketing communications: Processing is based on your explicit consent. You may withdraw consent at any time (see Section 11 — Marketing Communications).
• Platform improvement and analytics: Processing is carried out in k555's legitimate interests to understand how the platform is used and to improve the product experience for all players.
• Legal compliance: Processing is necessary to comply with applicable laws, regulations, court orders, and lawful requests from competent authorities.

k555 does not sell personal data. Data is shared with third parties only in the following strictly controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive only the data required to execute and verify your transactions. k555 does not share browsing history or gaming activity with payment providers.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Red Tiger, Spribe, and Ezugi receive a session token and account identifier to authenticate your game sessions. k555 shares the minimum data required for game launch and result settlement.
• KYC and identity verification partners: Where a third-party verification service is used, your identity documents are transmitted securely to that service for the sole purpose of verifying your age and identity. Verification partners are contractually bound to use the data for this purpose only.
• Fraud prevention and security providers: k555 may share IP addresses, device identifiers, and behavioural signals with fraud detection partners to identify and block suspicious activity.
• Legal and regulatory authorities: k555 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by law, court order, or lawful regulatory request. k555 will not notify you of such a disclosure where doing so would be unlawful or would prejudice an investigation.
• Business transfers: In the event of a merger, acquisition, or sale of k555 or its assets, personal data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy.

k555 uses cookies and similar tracking technologies to operate the platform, improve performance, and understand user behaviour. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account state, and ensure that security features operate correctly. These cookies cannot be disabled without breaking the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, saved deposit methods, and responsible gaming settings — to provide a more personalised experience on return visits.
• Analytics cookies: k555 uses analytics tools to measure platform traffic, identify popular game categories, and understand how players navigate the site. Analytics data is aggregated and does not identify individual users.
• Fraud detection cookies: These cookies store device fingerprint data used by k555's fraud prevention systems to detect multi-accounting, suspicious login patterns, and automated bot activity.

Cookies are stored on your device for varying durations. Session cookies are deleted when you close your browser. Persistent cookies remain on your device for the period specified in the cookie itself (typically between 30 days and 12 months).

You may manage cookie preferences through your browser settings. Disabling certain categories of cookies (particularly functional and fraud detection cookies) may affect your ability to use the k555 platform normally.

k555 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, including compliance with legal, accounting, and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with k555, and for a minimum of five (5) years following account closure, to satisfy anti-money laundering and fraud prevention record-keeping requirements.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs: Bet history and game session records are retained for a minimum of three (3) years from the date of the relevant session.
• Support communications: Email and live chat transcripts are retained for two (2) years from the date of the relevant interaction.
• Technical and IP log data: Server log data including IP addresses and session timestamps is retained for twelve (12) months on a rolling basis.
• Self-exclusion records: Records of self-exclusion requests are retained indefinitely to prevent circumvention of exclusion orders through new account registrations.

Where data is no longer required and no legal obligation to retain it exists, k555 deletes or anonymises the data in a secure and irreversible manner.

k555 implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or app and the k555 servers.
• Encryption at rest for all stored personal data, including identity documents, transaction records, and account credentials.
• Access controls that restrict access to personal data to authorised k555 personnel and contractors who have a specific need to access the data in the course of their role. All access is logged and subject to audit.
• Secure password storage using industry-standard hashing algorithms. k555 does not store passwords in plain text under any circumstances.
• Regular security reviews including vulnerability assessments and penetration testing of the k555 platform infrastructure.
• Incident response procedures that activate in the event of a confirmed or suspected data breach, including prompt notification to affected users where legally required.

While k555 takes all reasonable precautions to protect your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you believe your account has been accessed without authorisation, contact [email protected] immediately.

As a k555 player, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your k555 account. k555 will respond within 30 calendar days of receiving a valid request.

• Right of access: You may request a copy of all personal data k555 holds about you, including your account details, transaction history, gaming activity records, and any KYC documents on file.
• Right to rectification: If any personal data k555 holds about you is inaccurate or incomplete, you may request that it be corrected or completed. Supporting documentation may be required for corrections to identity data.
• Right to erasure: You may request deletion of your personal data. This right is subject to k555's legal retention obligations — data required to be retained for fraud prevention, anti-money laundering compliance, or dispute resolution cannot be deleted until the applicable retention period has expired.
• Right to restrict processing: You may request that k555 restrict the processing of your data in certain circumstances — for example, while a rectification request is being reviewed.
• Right to data portability: Where technically feasible, you may request that k555 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud detection purposes. k555 will consider your objection and respond within 30 days, explaining whether it will cease processing or why compelling legitimate grounds exist to continue.

k555 is strictly an adult platform. No individual under the age of 21 is permitted to register an account, access gaming services, or provide personal data to k555. k555 enforces the 21+ age requirement through mandatory age verification checks during registration and KYC review.

k555 does not knowingly collect personal data from individuals under the age of 21. If k555 becomes aware that personal data has been collected from an underage individual, the following steps will be taken immediately:

• The account will be permanently closed and all associated funds will be handled in accordance with k555's underage account procedure.
• All personal data collected from the underage individual will be deleted as soon as legally permissible, subject to any investigation or fraud-prevention obligations that may require temporary retention.
• k555 will review the circumstances of the underage registration to identify and close any gap in the age verification process.

If you believe a minor has registered an account on k555, please contact [email protected] immediately with any supporting information. k555 will investigate and act without delay.

k555 sends promotional and marketing communications — including bonus offer announcements, BPL and IPL betting promotions, seasonal offers for Eid and Pohela Boishakh, and platform update notifications — only to players who have explicitly opted in to receive such communications during or after registration.

Marketing communications are delivered via email and, where you have provided consent, via SMS or push notification. k555 does not share your contact details with third-party advertisers for their own marketing purposes.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email.
• Updating your communication preferences in your k555 account settings.
• Contacting [email protected] with a request to unsubscribe from all marketing communications.

Opting out of marketing communications will not affect transactional or security-related communications. k555 will continue to send account notifications, deposit confirmations, withdrawal updates, and security alerts regardless of your marketing communication preference, as these are necessary for the operation of your account.

k555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, k555 will update the "Last Updated" date at the top of this page and, where reasonably practicable, notify registered players via their registered email address.

It is your responsibility to review this Policy periodically. Continued use of the k555 platform following the posting of any amendments constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must stop using the platform immediately and contact [email protected] to request account closure and the deletion or return of your personal data, subject to k555's legal retention obligations.

Minor updates — such as typographical corrections, clarifications that do not alter the substance of existing provisions, or updates to reflect changes in payment method availability — may be made without formal notice.

All privacy-related enquiries, data rights requests, and complaints regarding k555's handling of your personal data should be directed to the k555 support team. k555 is committed to responding to all privacy-related communications within 30 calendar days of receipt.

When submitting a data rights request, please include the following in your email to enable k555 to verify your identity and action your request efficiently:

• Your full name as registered on your k555 account.
• The email address associated with your k555 account.
• A clear description of the right you wish to exercise (e.g., access request, erasure request, marketing opt-out).
• For identity-sensitive requests: a copy of your government-issued photo ID to confirm your identity.

k555 will acknowledge receipt of your request within 5 business days and provide a full response within 30 calendar days. In cases of complexity or high volume, k555 may extend the response period by a further 30 days, in which case you will be notified of the extension and the reason for it before the initial 30-day deadline expires.

If you are dissatisfied with k555's response to a privacy complaint, you retain the right to escalate your complaint through the formal dispute resolution procedure described in the k555 Terms & Conditions.